CVE-2014-8022
Description
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Identity Services Engine allow remote attackers to inject arbitrary web script or HTML via input to unspecified web pages, aka Bug IDs CSCur69835 and CSCur69776.
Risk Information
Base Score
4.7
MODERATE
Vector
AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
EPSS Score
Exploitation Probability
0.295
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Cisco Identity Services Engine Cross-Site Scripting Vulnerability For Cisco Identity Services Engine | NCM |
| Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability (CVE-2014-8022) | NCM |
Patch Details
Click to see the patches provided by ManageEngine for this CVE
| Patch ID | Patch Description |
|---|---|
| PATCH-1706002 | Security Update for Cisco Identity Services Engine 2.0(0.905) |
References
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234